This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9lvR3LL7tWsoFqx5QJaFxLfGfbg.roa
File:                     9lvR3LL7tWsoFqx5QJaFxLfGfbg.roa (raw, json)
Hash identifier:          emQQ+7PBqwuS3AWcF0M6/oOjSgoj1Pl35dV7JUuJF0Q=
Subject key identifier:   F6:5B:D1:DC:B2:FB:B5:6B:28:16:AC:79:40:96:85:C4:B7:C6:7D:B8
Certificate issuer:       /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial:       019B79100A75F9CB68AA91C6485FDA7D8898
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9lvR3LL7tWsoFqx5QJaFxLfGfbg.roa
Signing time:             Thu 01 Jan 2026 10:17:32 +0000
ROA not before:           Thu 01 Jan 2026 10:17:32 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     213389
IP address blocks:        194.36.80.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:79:10:0a:75:f9:cb:68:aa:91:c6:48:5f:da:7d:88:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
        Validity
            Not Before: Jan  1 10:17:32 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=f65bd1dcb2fbb56b2816ac79409685c4b7c67db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:80:42:fe:e8:05:5b:9b:9a:9b:91:aa:9a:
                    e6:04:44:57:f1:cc:5a:e3:90:17:87:6a:fb:c5:5c:
                    67:83:c7:2d:b8:a5:32:0b:9f:8f:65:89:85:f8:54:
                    46:0d:77:98:f4:16:b4:20:e1:10:e3:93:78:f1:8a:
                    5b:6c:1c:89:06:df:a5:6d:a4:d9:5e:45:62:38:cb:
                    e7:92:e9:cd:59:0b:3c:de:d9:02:e5:db:ab:39:f5:
                    c6:82:e7:fe:14:37:17:a1:25:6e:43:eb:85:4c:1b:
                    35:a7:0c:d6:b1:00:bd:7c:ef:df:38:4f:d4:cc:b7:
                    a6:c2:06:b3:16:f9:17:7b:41:59:ea:f6:3e:73:cd:
                    a1:19:52:3d:f5:24:be:aa:42:38:65:98:e2:20:0a:
                    f3:64:01:2c:96:75:e1:49:50:99:fc:0a:be:c2:71:
                    2f:8b:dc:dc:f9:a0:06:31:7e:35:27:6e:17:72:d3:
                    67:b6:35:85:e8:81:6e:25:03:b0:55:e9:09:35:a5:
                    b4:28:63:18:58:d8:91:dd:dd:69:9c:00:77:89:de:
                    76:f1:07:83:a5:fd:d4:19:3d:a2:ce:dc:72:29:e0:
                    2c:cc:fd:2b:b1:d2:45:4b:54:1a:75:97:02:69:7e:
                    ae:a8:2e:42:00:4e:13:1d:a4:9c:96:b3:bb:f5:18:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5B:D1:DC:B2:FB:B5:6B:28:16:AC:79:40:96:85:C4:B7:C6:7D:B8
            X509v3 Authority Key Identifier:
                keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/9lvR3LL7tWsoFqx5QJaFxLfGfbg.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.36.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:6d:a9:6b:11:03:18:e3:9a:f3:8c:85:73:cb:ec:70:49:6c:
         45:cb:39:56:2e:c9:03:cd:46:e9:af:c0:bf:7d:75:a8:1b:b8:
         16:e6:97:90:19:55:26:a1:32:59:44:7c:3e:0f:7e:56:d7:c7:
         b8:12:b9:25:2f:19:7f:90:c0:01:a9:5d:fa:ca:91:0b:d3:84:
         25:83:dc:84:bd:3f:83:a0:ea:f7:25:e9:4c:47:12:e1:74:40:
         18:0b:f8:7e:44:14:6e:ac:23:fb:d8:63:5d:eb:d5:28:8a:b0:
         5d:82:e8:83:d9:bc:62:41:59:29:08:09:3f:81:c8:12:59:e6:
         76:bb:0a:9e:68:e2:45:0c:a1:ef:e4:23:a6:1a:6b:b3:0d:82:
         95:9d:3d:db:a6:c2:48:ba:79:68:e6:37:23:cb:d3:8f:76:31:
         1a:1f:a9:f4:68:89:f9:aa:c9:be:14:02:80:de:04:64:15:59:
         e8:65:5b:bc:0a:2c:f7:eb:ef:77:a3:f4:c0:e5:34:e4:f7:07:
         38:c0:5a:04:b6:48:b9:a1:9d:a9:fc:d0:79:77:0c:13:a5:db:
         a4:21:07:77:aa:d5:af:05:7f:f7:af:10:ac:05:9e:78:52:16:
         0b:2f:8e:e7:af:8a:4d:6d:e1:70:fd:51:d7:85:28:ec:e1:03:
         4a:3a:01:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 15:01:19 2026 by rpki-client